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Agreement 
Between 

the Government of the United States of America 
and 

the Government of the Federal Republic of Germany 

on 

enhancing cooperation in preventing and 
combating serious crime 



The Government of the United States of America 
and 

the Government of the Federal Republic of Germany (hereinafter the "Parties"), 



Prompted by the desire to cooperate as partners to combat serious crime, particularly terror- 
ism, more effectively. 

Recognising that information sharing is an essential component in the fight against serious 
crime, particularly terrorism. 

Recognising the importance of preventing and combating serious crime, particularly terror- 
ism, while respecting fiuidamental rights and freedoms, notably privacy, 

Following the example of the Treaty of Prum of May 27, 2005 on enhancing cross-border 
cooperation, 

Expecting that the United States of America and other Member States of the European Un- 
ion may consider this Agreement as a model for similar agreements between the United 
States of America and those other Member States, and 

Seeking to enhance and encourage cooperation between the Parties in the spirit of transat- 
lantic partnership. 

Have agreed as follows: 

Article 1 
Definitions 

For the purposes of this Agreement, 

1. "DNA profiles" (for the Federal Republic of Germany, "DNA-Identifizierungsmuster" 
(DNA identification patterns)) shall mean a letter or numerical code representing a number 
of identifying features of the non-coding part of an analysed human DNA sample, i.e. of the 
specific chemical form at the various DNA loci; 

2. "Reference data" shall mean a DNA profile and the related reference (DNA reference 
data) or fingerprinting data and the related reference (fingerprinting reference data). Refer- 
ence data must not contain any data from which the data subject can be directly identified. 
Reference data not traceable to any individual (imtraceables) must be recognisable as such; 
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3. "Personal data" shall mean any information relating to an identified or identifiable natural 
person (the "data subject"); and 

4. "Processing of personal data" shall mean any operation or set of operations which is per- 
formed upon personal data, whether or not by automated means, such as collection, re- 
cording, organisation, storage, adaptation or alteration, sorting, retrieval, consultation, use, 
disclosure by supply, dissemination or otherwise making available, combination or align- 
ment, blocking, or deletion through erasure or destruction of personal data. 



Article 2 
Purpose of this Agreement 

The purpose of this Agreement is to enhance the cooperation between the United States of 
America and the Federal Republic of Germany in combating and preventing serious crime. 

Article 3 
Fingerprinting data 

For the purpose of implementing this Agreement, the Parties shall ensure the availability of 
reference data from the file for the national automated fingerprint identification systems 
established for the prevention and investigation of criminal offenses. Reference data shall 
only include fingerprinting data and a reference. 

Article 4 

Automated searching of fingerprint data 

1. For the prevention and investigation of serious crime, each Party shall allow the other 

Party's national contact points, as referred to in Article 6, access to the reference data in the 
automated fingerprint identification systems which it has established for that purpose, with 
the power to conduct automated searches by comparing fingerprinting data. Search powers 
may be exercised only in individual cases and in compliance with the searching Party's na- 
tional law. 

2. Firm matching of fingerprinting data with reference data held by the Party in charge of 
the file shall be carried out by the searching national contact points by means of the auto- 
mated supply of the reference data required for a clear match. 
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Article 5 

Supply of further personal and other data 

Should the procedure referred to in Article 4 show a match between fingerprinting data, the | 
supply of any available further personal data and other data relating to the reference data 

shall be governed by the national law, including the legal assistance rules, of the requested « 

Party. I 

j \ 

Article 6 \ \ 

National contact points and implementing agreements 1 1 

|1 

1. For the purpose of the supply of data as referred to in Article 4, each Party shall desig- j 
nate one or more national contact points. The powers of the contact points shall be governed | 
by the national law applicable. j 

2. The technical and procedural details for the searching conducted pursuant to Article 4 j 
shall be set forth in one or more implementing agreements. | 



Article 7 1 

Automated searching of DNA profiles 1 1 

\\ 

1 . If permissible under the national law of both parties and on the basis of reciprocity, the j 
Parties may allow each other's national contact point, as referred to in Article 9, access to j 
the reference data in their DNA analysis files, with the power to conduct automated \ 
searches by comparing DNA profiles for the investigation of serious crime. Searches may I 
be exercised only in individual cases and in compliance with the searching Party's national j j 
law. j I 

2. Should an automated search show that a DNA profile supplied matches a DNA profile i 
entered in the other Party's file, the searching national contact point shall receive by auto- I 
mated notification the reference data for which a match has been foimd. If no match can be | 
found, automated notification of this shall be given. i | 



Articles ji 
Supply of further personal and other data j 

jl 

Should the procedure referred to in Article 7 show a match between DNA profiles, the sup- j ; 
ply of any available flirther personal data and other data relating to the reference data shall | 
be governed by the national law, including the legal assistance rules, of the requested Party. \ 

n 
i\ 
jl 

I 

it 
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Article 9 

National contact point and implementing agreements 

1. For the purposes of the supply of data as set forth in Article 7, each Party shall desig- 
nate a national contact point. The powers of the contact point shall be governed by the na- 
tional law applicable. 

2. The technical and procedural details for the searching conducted pursuant to Article 7 
shall be set forth in one or more implementing agreements. 

Article 10 

Supply of personal and other data in order to prevent terrorist offenses 

1. For the prevention of terrorist offenses, the Parties may, in compliance with their respec- 
tive national law, in individual cases, even without being requested to do so, supply the 
other Party's relevant national contact point, as referred to in paragraph 7, with the personal 
data specified in paragraph 2, in so far as is necessary because particular circumstances give 
reason to believe that the data subject(s): 

a. will commit terrorist or terrorism-related offenses, or offenses related to a terrorist 
group or association, as those offenses are defined under the supplying Party's national 
law or 

b. are undergoing or have undergone uaining to commit the offenses referred to in sub- 
paragraph a. 

2. The personal data to be supplied shall include, if available, surname, first names, former 
names, other names, aliases, alternative spelling of names, sex, date and place of birth, cur- 
rent and former nationalities, passport number, numbers from other identity documents, and 
fingerprinting data, as well as a description of the circumstances giving rise to the belief 
referred to in paragraph 1. 

3. Together with the notification according to Article 24 sentence 1, the Parties may in a 
separate declaration notify each other of the offenses which under the respective Party's law 
are considered as offenses within the scope of paragraph 1. ITiis declaration may be altered 
at any time by notification to the other Party. 

4. The supplying authority may, in compliance with its national law, impose conditions on 
the use made of such data by the receiving authority. If the receiving authority accepts such 
data, it shall be bound by any such conditions. 



5 



5. Generic restrictions with respect to the legal standards of the receiving party for process- 
ing personal data may not be imposed by the transmitting party as a condition under sub- 
paragraph 4 to providing data. 

6. In addition to the personal data referred to in paragraph 2, the Parties may provide each 
other with non-personal, terrorism-related data. 

7. Each Party shall designate one or more national contact points for the exchange of per- 
sonal and other data under this Article with the other Party's contact points. The powers of 
the national contact points shall be governed by the national law applicable. 



Article 11 
Privacy and Data Protection 

1 . The Parties recognize that the handling and processing of personal data that they acquire j | 
from each other is of critical importance to preserving confidence in the implementation of j | 
this Agreement. 1 

2. The Parties commit themselves to processing personal data fairly and in accord with their | j 
respective laws and: 1 1 

ji 

a. ensuring that the personal data provided is adequate and relevant in relation to the spe- | 
cific purpose of the transfer; 1 1 

b. retaining personal data only so long as necessary for the specific purpose for which the 
data were provided or further processed in accordance with this Agreement; and 

c. ensuring that possibly inaccurate personal data is timely brought to the attention of the 
receiving Party in order that appropriate corrective action is taken. 

3. This Agreement shall not give rise to rights on the part of any private person, including to 
obtain, suppress, or exclude any evidence, or to impede the sharing of personal data. Rights 
existing independently of this Agreement, however, are not affected. 
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Article 12 

Transmission of Special Categories of Personal Data 

1. Personal data revealing racial or ethnic origin, political opinions or religious or other be- 
liefs, trade union membership or concerning health and sexual life may only be provided if 
they are particularly relevant to the purposes of this Agreement. 

2. The Parties, recognizing the special sensitivity of the above categories of personal data, 
shall take suitable safeguards, in particular appropriate security measures, in order to protect 
such data. 

Article 13 

Limitation on processing to protect personal and other data 

1. Without prejudice to Article 10, paragraph 4, a Party may process data obtained under 
this Agreement: 

a. for the puqDose of its criminal investigations; 

b. for preventing a serious threat to its public security; 

c. in its non-criminal judicial or administrative proceedings directly related to investiga- 
tions set forth in subparagraph a; or 

d. for any other purpose, only with the prior consent of the Party which has transmitted 
the data. 

2. The Parties shall not communicate data provided under this Agreement to any third State, 
international body or private entity without the consent of the Party that provided the data 
and without the appropriate safeguards. 

3. A Party may conduct an automated search of the other Party's fingerprint or DNA files 
under Articles 4 or 7, and process data received in response to such a search, including the 
communication whether or not a hit exists, solely in order to: 

a. establish whether the compared DNA profiles or fingerprint data match; 

b. prepare and submit a follow-up request for assistance in compliance with its national 
law, including the legal assistance rules, if those data match; or 
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c. conduct record-keeping, as required or permitted by its national law. 



The Party administering the file may process the data supplied to it by the searching Party 
during the course of an automated search in accordance with Articles 4 and 7 solely where 
this is necessary for the purposes of comparison, providing automated replies to the search 
or record-keeping pursuant to Article 15. The data supplied for comparison shall be deleted 
immediately following data comparison or automated replies to searches unless further 
processing is necessary for the purposes mentioned under subparagraphs b. and c. of this 
paragraph. 

Article 14 

Correction, blockage and deletion of data 

1 . At the request of the supplying Party, the receiving Party shall be obliged to correct, 
block, or delete, consistent with its national law, data received under this Agreement that is 
incorrect or incomplete or if its collection or further processing contravenes this Agreement 
or the rules applicable to the supplying Party. 

2. Where a Party becomes aware that data it has received from the other Party under this 
Agreement is not accurate, it shall take all appropriate measures to safeguard against erro- 
neous reliance on such data, which shall include in particular supplementation, deletion, or 
correction of such data. 

3. Each Party shall notify the other if it becomes aware that material data it has transmitted 
to the other Party or received from the other Party under this Agreement is inaccurate or 
unreliable or is subject to significant doubt. 



Article 15 
Documentation 

1. Each party shall maintain a record of the transmission and receipt of data communicated 
to the other party under this Agreement. This record shall serve to: 

a. ensure effective monitoring of data protection in accordance with the national law of 
the respective Party; 

b. enable the Parties to effectively make use of the rights granted to them according to 
Articles 14 and 18; and 

c. ensure data security. 
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2. The record shall include: 



a. the data supplied, 

b. the date of supply and 

c. the recipient of the data in case the data is supplied to other entities. 

3. The recorded data must be protected with suitable measures against inappropriate use 
and other forms of improper use and must be kept for two years. After the conservation pe- 
riod die recorded data must be deleted immediately, unless this is inconsistent with national 
law, including applicable data protection and retention rules. 



Article 16 
Data Security 

1. The Parlies shall ensure that the necessary technical measures and organizational ar- 
rangements are utilized to protect personal data against accidental or unlawful destruction, 
accidental loss or unauthorized disclosure, alteration, access or any unauthorized form of 
processing. The Parties in particular shall ensure that only those authorized to access per- 
sonal data can have access to such data. 

2. The implementing agreements that govern the procedures for automated searches of fin- 
gerprint and DNA files pursuant to Articles 4 and 7 shall provide: 

a. that appropriate use is made of modem technology to ensure data protection, security, 
confidentiality and integrity; 

b. that encryption and authorization procedures recognized by the competent authorities 
are used when having recourse to generally accessible networks; and 

c. for a mechanism to ensure that only permissible searches are conducted. 
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Article 17 

Transparency - Providing information to the data subjects 

1. Nothing in this Agreement shall be interpreted to interfere with the Parties' legal obliga- 
tions, as set forth by their respective laws, to provide data subjects with information as to 
the purposes of the processing and the identity of the data controller, the recipients or cate- 
gories of recipients, the existence of the right of access to and the right to rectify the data 
concerning him or her and any fiirther information such as the legal basis of the processing 
operation for which the data are intended, the time limits for storing the data and the right of 
recourse, in so far as such further information is necessary, having regard for the purposes 
and the specific circumstances in which the data are processed, to guarantee fair processing 
with respect to data subjects. 

2. Such information may be denied in accordance with the respective laws of the Parties, 
including if providing this information may jeopardize: 

a. the purposes of the processing; 

b. investigations or prosecutions conducted by the competent authorities in the United 
States of America or by the competent authorities in the Federal Republic of Germany; 
or 

c. the rights and freedoms of third parties. 



Article 18 
Information 

Upon request, the receiving Party shall inform the supplying Party of the processing of sup- 
plied data and the result obtained. The receiving Party shall ensure that its answer is com- 
municated to the supplying Party in a timely manner. 

Article 19 
Relation to Other Agreements 

Nothing in this Agreement shall be construed to limit or prejudice the provisions of any 
other treaty, agreement, or domestic law, or to affect any working law enforcement relation- 
ship allowing for information sharing between the Federal Republic of Germany and the 
United States of America. 
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Article 20 

1 1 Consultations | 

; j 1 . The Parties shall consult each other regularly on the implementation of the provisions of 1 1 

1 1 this Agreement. j 

■ ! ! 

<\ 2. In the event of any dispute regarding the interpretation or application of this Agreement, 

! i the Parties shall consult each other in order to facilitate its resolution. 

I; 

jl Article 21 j 

i • Expenses | 

ii i 

\ I Each Party shall bear the expenses incurred by its authorities in implementing this Agree- j 

1 1 ment. In special cases, the Parties concerned may agree on different arrangements. | \ 



Article 22 
Termination of the Agreement 

This Agreement may be terminated by either Party with three months' notice in writing to 
the other Party. The provisions of this Agreement shall continue to apply to data supplied 
prior to such termination. 



j Article 23 I 

■ Amendments ! 

u . i 

is 1 . The Parties shall enier into consultations with respect to the amendment of this Agree- | 

' ment at the request of either Party. i 

2. This Agreement may be amended by written agreement of the Parties at any time. j | 



I; 

; 1 

'[ 

i 
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Article 24 
Entry into force 



This Agreement shall enter into force, with the exception of Articles 7 through 9, on the 
date of the later note completing an exchange of diplomatic notes between the Parties indi- 
cating that each has taken the steps necessary to bring the Agreement into force. Articles 7 
through 9 of this Agreement shall enter into force following the conclusion of the imple- 
menting agreement(s) referenced in article 9 and on the date of the later note completing an 
exchange of diplomatic notes between the Parties indicating that each Party is able to im- 
plement those articles on a reciprocal basis. This shall occur if the laws of both Parties 
permit the type of DNA screening contemplated by Articles 7 to 9. 

Done at Washington on October ../.., 2008 in duplicate, in the English and German lan- 
guages, both texts being equally authentic. 

For the Government of the For the Government of the 

United States of America: Federal Republic of Germany: 
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